General
-
Target
f0fee5483ca4d1aed550c4ef24e3cb6b5a3154432f49eb7afc2ced15271a2f80
-
Size
580KB
-
Sample
230605-d2q9nafc4s
-
MD5
71be2fdd0bf1806a5e1f62ca79cb9af7
-
SHA1
3d4366d35d36d02d41a9b661f9fb9d2a70668328
-
SHA256
f0fee5483ca4d1aed550c4ef24e3cb6b5a3154432f49eb7afc2ced15271a2f80
-
SHA512
9e68402183016f200a3b3e9fbd0a9f8285b228f6c968a5bcb78111b02cb4d8ff9af762a499d3b46797236d480f2d715fe9545b0f2a6f58733bb704b1897fca84
-
SSDEEP
12288:/MrDy90dfv7RfXp+f7idwquN6Vy/8s2PIV4UiYk+T:EyYfv7qidw76Vy/8sqIV4Gk0
Static task
static1
Behavioral task
behavioral1
Sample
f0fee5483ca4d1aed550c4ef24e3cb6b5a3154432f49eb7afc2ced15271a2f80.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
f0fee5483ca4d1aed550c4ef24e3cb6b5a3154432f49eb7afc2ced15271a2f80
-
Size
580KB
-
MD5
71be2fdd0bf1806a5e1f62ca79cb9af7
-
SHA1
3d4366d35d36d02d41a9b661f9fb9d2a70668328
-
SHA256
f0fee5483ca4d1aed550c4ef24e3cb6b5a3154432f49eb7afc2ced15271a2f80
-
SHA512
9e68402183016f200a3b3e9fbd0a9f8285b228f6c968a5bcb78111b02cb4d8ff9af762a499d3b46797236d480f2d715fe9545b0f2a6f58733bb704b1897fca84
-
SSDEEP
12288:/MrDy90dfv7RfXp+f7idwquN6Vy/8s2PIV4UiYk+T:EyYfv7qidw76Vy/8sqIV4Gk0
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-